Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier: 3ohiGGvCUMpGPTNgjJhAr9Fdez2DULoRfb9DeX9y8BQ=
Subject key identifier: 02:E9:E3:AF:67:FF:C8:EB:B9:4E:40:2F:E1:B1:CC:D4:FB:8F:E9:BE
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 019A4E86898AC81FCB3A36E30C220B0FD48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number: 041E
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: XmdSMCmint9DPZ--cCLmS94eFwY.roa (hash: Ecj0xnHDR2ooGxeY4fWUT554GHurKxl+Q6h8BrSfnec=)
2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: DEhcRuGK1RBAUL810MgziPc/wPqb2MD+V4GjVteR8Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:89:8a:c8:1f:cb:3a:36:e3:0c:22:0b:0f:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=02e9e3af67ffc8ebb94e402fe1b1ccd4fb8fe9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:32:5e:a8:81:78:80:83:9c:25:2e:30:ec:
f4:3b:9f:5a:a3:29:8c:27:14:11:00:29:a7:f8:15:
35:59:0f:47:32:3b:4f:9b:f7:81:cd:f7:32:0b:8c:
f5:00:b0:9b:2a:c6:02:d5:69:75:d8:8d:fc:7f:78:
03:c7:ad:50:0c:fc:6f:3d:92:69:da:bc:74:91:2e:
38:9a:79:9e:2a:6a:35:ea:ca:b9:d4:f4:09:7c:6c:
6b:ef:ee:74:a1:1b:19:10:58:8e:35:ad:71:60:4f:
45:47:53:d1:12:af:2f:c5:ec:17:c0:38:f0:eb:68:
4e:1d:d9:79:0f:96:85:b3:11:06:73:7f:76:07:92:
e1:10:e2:bd:4b:ba:2f:e4:6c:33:1b:b9:b6:f9:ba:
51:e0:46:d8:7f:7f:bb:dd:de:7b:9b:a8:28:85:c5:
8f:45:54:ad:19:39:77:d2:34:0b:1c:a9:c1:f8:b9:
62:8b:57:07:7a:07:0d:1f:84:1d:08:69:65:80:43:
6d:18:66:0d:76:2f:2f:ff:f9:fb:61:b5:0f:6a:86:
85:2e:5f:bb:a6:8a:67:ce:9c:5e:03:17:4d:fe:81:
36:9c:cd:a8:11:2d:ba:0c:45:5b:73:2a:48:81:7b:
9f:3f:f2:a6:38:71:9a:c8:3f:3e:ea:ca:be:c7:0c:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:E3:AF:67:FF:C8:EB:B9:4E:40:2F:E1:B1:CC:D4:FB:8F:E9:BE
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:98:3a:ec:8c:08:52:a6:fd:fd:77:1e:73:2f:ce:2d:5c:
e7:6c:54:e8:5d:fe:5c:6b:f0:65:5b:83:90:c0:19:5c:e9:85:
4b:1c:19:a3:5b:ee:db:74:29:6c:0f:a7:52:38:15:98:92:b9:
28:49:58:f4:c9:3c:f1:9e:0e:74:0c:08:4e:15:af:fc:d8:b5:
18:e3:9a:1b:2d:76:2a:c3:02:0f:60:66:47:3c:ac:bb:df:44:
9f:16:af:c9:25:f3:7d:16:8a:7b:19:66:5f:6e:c0:09:11:18:
cd:8f:e4:8a:7d:f4:76:e0:63:65:b7:e3:6f:3c:dc:47:3d:46:
fd:d9:78:7b:c6:e9:5a:16:57:26:0c:24:74:6f:3f:e6:a7:97:
d1:cc:ef:23:a7:d4:e9:95:d7:a9:fb:99:31:b6:68:a5:c8:48:
31:a7:94:07:a7:7e:82:8c:fc:40:e0:2a:8b:83:e6:a7:39:8d:
04:6c:43:c8:ff:be:dd:50:4f:26:4e:65:a0:7c:9b:df:08:25:
d6:22:66:9f:60:e2:10:3d:16:69:30:59:71:a1:83:28:f0:4f:
55:73:9a:0b:41:24:a4:1f:4c:ca:0a:eb:70:e9:e1:b6:fd:69:
6d:d5:29:04:79:15:a2:15:74:ea:85:49:e8:4a:a1:1e:48:25:
f7:b4:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:42 2025 by rpki-client